settings/user-edit.php

   1 <?php
   2
   3 require_once "../common.php";
   4 require_once "../header.php";
   5 do_log($_POST);
   6
   7 $us = unreal_get_current_user();
   8 $id = (isset($_GET['id'])) ? $_GET['id'] : $us->id;
   9 $edit_user = new PanelUser(NULL, $id);
  10 $can_edit_profile = (user_can($us, PERMISSION_MANAGE_USERS) || $edit_user->id == $us->id) ? true : false;
  11 $caneditpermissions = (user_can($us, PERMISSION_MANAGE_USERS)) ? true : false;
  12 $can_edit = ($caneditpermissions) ? "" : "disabled";
  13 $postbutton = (isset($_POST['update_user'])) ? true : false;
  14 $permissions = (isset($_POST['permissions'])) ? $_POST['permissions'] : [];
  15 $edit_perms = (isset($edit_user->user_meta['permissions'])) ? unserialize($edit_user->user_meta['permissions']) : [];
  16
  17 /* Check if they can edit their permissions and if the permissions have indeed been changed */
  18 if ($postbutton && is_array($permissions) && $caneditpermissions
  19         && $permissions != $edit_perms)
  20 {
  21     foreach ($permissions as $p)
  22         if (!in_array($p, $edit_perms))
  23             $edit_user->add_permission($p);
  24
  25     foreach($edit_perms as $p)
  26         if (!in_array($p, $permissions))
  27             $edit_user->delete_permission($p);
  28
  29     Message::Success("Permissions for <strong>$edit_user->username</strong> have been updated");
  30 }
  31
  32 if ($postbutton && $can_edit_profile)
  33 {
  34     $array['update_fname'] = (isset($_POST['first_name']) && strlen($_POST['first_name'])) ? $_POST['first_name'] : false;
  35     $array['update_lname'] = (isset($_POST['last_name']) && strlen($_POST['last_name'])) ? $_POST['last_name'] : false;
  36     $array['update_bio'] = (isset($_POST['bio']) && strlen($_POST['bio'])) ? $_POST['bio'] : false;
  37     $array['update_email'] = (isset($_POST['email']) && strlen($_POST['email'])) ? $_POST['email'] : false;
  38     $array['update_pass'] = (isset($_POST['password']) && strlen($_POST['password'])) ? $_POST['password'] : false;
  39     $array['update_pass_conf'] = (isset($_POST['passwordconfirm']) && strlen($_POST['passwordconfirm'])) ? $_POST['passwordconfirm'] : false;
  40
  41     if (!$array['update_pass'])
  42     {
  43         unset($array['update_pass']);
  44         unset($array['update_pass_conf']);
  45     }
  46     elseif ($array['update_pass'] == $array['update_pass_conf'])
  47     {
  48         $array['update_pass_conf'] = password_hash($array['update_pass_conf'], PASSWORD_ARGON2ID);
  49         unset($array['update_pass']);
  50     }
  51     else
  52     {
  53         Message::Fail("Could not update password: Passwords did not match");
  54         unset($array['update_pass']);
  55         unset($array['update_pass_conf']);
  56     }
  57     $edit_user->update_core_info($array);
  58     $edit_user = new PanelUser($edit_user->username);
  59 }
  60 ?>
  61 <h4>Edit User: "<?php echo $edit_user->username; ?>"</h4>
  62 <br>
  63 <form method="post" action="user-edit.php?id=<?php echo $edit_user->id; ?>" autocomplete="off" enctype="multipart/form-data">
  64 <?php if ($can_edit_profile) { ?>
  65 <a class="btn btn-<?php echo (user_can($us, PERMISSION_MANAGE_USERS)) ? "danger" : "info"; ?>" data-toggle="collapse" href="#collapseExample" role="button" aria-expanded="false" aria-controls="collapseExample">
  66 <?php echo (user_can($us, PERMISSION_MANAGE_USERS)) ? "Edit" : "View"; ?> Permissions
  67 </a>
  68 <div class="collapse" id="collapseExample">
  69     <br>
  70   <div class="card card-body">
  71     <h6>Here are all the things <?php echo $edit_user->username; ?> can do</h6>
  72     <?php generate_panel_user_permission_table($edit_user); ?>
  73   </div>
  74 </div>
  75 <?php } ?>
  76 <br><br>
  77 <div class="input-group mb-3">
  78     <div class="input-group-prepend">
  79         <span class="input-group-text" style="width: 100px;">@</span>
  80     </div><input disabled type="text" class="form-control" name="username" id="username" placeholder="<?php echo $edit_user->username; ?>">
  81 </div>
  82
  83 <div class="input-group mb-3">
  84     <div class="input-group-prepend">
  85         <span class="input-group-text" style="width: 100px;">First Name</span>
  86     </div><input <?php echo $can_edit; ?> type="text" class="form-control" name="first_name" id="first_name" placeholder="<?php echo $edit_user->first_name; ?>">
  87 </div>
  88
  89
  90 <div class="input-group mb-3">
  91     <div class="input-group-prepend">
  92         <span class="input-group-text" style="width: 100px;">Last Name</span>
  93     </div><input <?php echo $can_edit; ?> type="text" class="form-control" name="last_name" id="last_name" placeholder="<?php echo $edit_user->last_name; ?>">
  94 </div>
  95
  96
  97 <div class="input-group mb-3">
  98     <div class="input-group-prepend">
  99         <span class="input-group-text" style="width: 100px;">Bio</span>
 100     </div><textarea <?php echo $can_edit; ?> class="form-control" name="bio" id="username"><?php echo $edit_user->bio; ?></textarea>
 101 </div>
 102
 103
 104 <div class="input-group mb-3">
 105     <div class="input-group-prepend">
 106         <span class="input-group-text" style="width: 100px;">Email</span>
 107     </div><input <?php echo $can_edit; ?> type="text" class="form-control" name="email" id="email" autocomplete="off" value="<?php echo $edit_user->email; ?>">
 108 </div>
 109
 110 <div class="input-group mb-3">
 111     <div class="input-group-prepend">
 112         <span class="input-group-text" style="width: 150px;">New Password</span>
 113     </div><input <?php echo $can_edit; ?> type="password" class="form-control" name="password" id="password" autocomplete="off">
 114 </div><div class="input-group mb-3">
 115     <div class="input-group-prepend">
 116         <span class="input-group-text" style="width: 150px;">Confirm Password</span>
 117     </div><input <?php echo $can_edit; ?> type="password" class="form-control" name="passwordconfirm" id="passwordconfirm" autocomplete="off">
 118 </div>
 119
 120 <br>
 121 <button type="submit" name="update_user" class="btn btn-primary">Save Changes</button><br>
 122 </form>
 123 <?php
 124 require_once "../footer.php";